Password reset link doesn't expire

Password reset functionality can be rife with errors. In this particular case, password reset tokens where not expiring after an amount of time. This greatly increases the odds of malicious users guessing correct reset tokens and hijacking an account.